SECURITY / COREDEV

CoreDev Studio security

This is a static site with no login form or authentication server. Network protection is configured in Cloudflare.

◎

Website protection

Cloudflare Pages serves HTML and CSS through its network. DDoS mitigation applies to served traffic, but actual dashboard settings must be checked.

▣

Download protection

The EXE is hosted in Cloudflare R2. The r2.dev development URL is intended for testing; a custom domain is recommended for production.

◈

Owner checklist

Enable Cloudflare two-factor authentication, review WAF, and never publish API tokens. Signing EXE builds and posting SHA-256 checksums is recommended.

Cloudflare DDoS protection is configured at the hosting layer, not embedded in HTML. See SECURITY_CLOUDFLARE_RU.md included in this archive.
← Back home